CVE-2026-66315
published 2026-08-04CVE-2026-66315: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
PriorityP349high7.5CVSS 3.1
AVNACHPRNUIRSUCHIHAH
EPSS
0.61%
48.4th percentile
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 151.0.4129.59 | 151.0.4129.59 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 151.0.4129.59 | 151.0.4129.59 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Edge up to 150.0.4078.99 use after free
vuldb·2026-08-04·CVSS 7.5
CVE-2026-66315 [HIGH] Microsoft Edge up to 150.0.4078.99 use after free
A vulnerability was found in Microsoft Edge. It has been rated as critical. The affected element is an unknown function. The manipulation leads to use after free.
This vulnerability is documented as CVE-2026-66315. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is advised.
GHSA
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
ghsa_unreviewed·2026-08-04
CVE-2026-66315 [HIGH] CWE-416 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published